Contents
Section: Security Hardening · SRI-based integrity verification and resumable downloads for large files. Protects against CDN compromise and supply chain attacks in the browser.
FreshScore 78
Entry
verifyfetch
Appears in 4 awesome lists
Browser-side integrity verification and resumable downloads for large files using SRI hashes, defending against CDN compromise and supply-chain attacks, by @hamzaydia.
Open github.comhamzaydia/verifyfetch
Found in these lists
awesome-pwa
Section: Service Worker Libraries · Resumable, integrity-verified downloads for large offline assets. Includes Service Worker mode for transparent verification of all fetch requests.
FreshScore 79
Awesome Web Security
Section: Preventing · Browser-side integrity verification and resumable downloads for large files using SRI hashes, defending against CDN compromise and supply-chain attacks, by @hamzaydia.
FreshScore 87
Awesome Rust
Section: Cryptography · Streaming file integrity verification using Rust/WASM SHA-256 hashing with constant memory. Resumable downloads for large files in the browser.
FreshScore 94
Often listed next to it
Acra
Database security suite. Database proxy with field-level encryption, search through encrypted data, SQL injections prevention, intrusion detection, honeypots. Supports client-side and proxy-side ("transparent") encryption. SQL, NoSQL.
In 6 listsDetails
js-xss
Sanitize untrusted HTML (to prevent XSS) with a configuration specified by a Whitelist by @leizongmin.
In 5 listsDetails
DOMPurify
DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:
In 5 listsDetails
pompelmi
In-process file-upload security middleware for Node.js that scans untrusted uploads before storage to detect malware, MIME spoofing, and risky archives, maintained by pompelmi.
In 5 listsDetails
BunkerWeb
BunkerWeb is an open-source Next-Generation Web Application Firewall (WAF). It provides easy protection for your web services and is designed to remain secure by default. It integrates seamlessly with…
In 4 listsDetails
FCaptcha
Self-hosted, invisible CAPTCHA that detects bots and AI agents via behavioral analysis, TLS fingerprinting, and SHA-256 proof of work. Checkbox or invisible mode; Go, Python, and Node.js servers.
In 3 lists
Workbox
📦 Workbox: JavaScript libraries for Progressive Web Apps
In 3 lists
sw-toolbox
A collection of simple helpers to simplify implementing common runtime caching patterns.
In 3 lists